If you can provide any ammunition here I would be most grateful.
As the change manager I wrote our procedure. Our Operations manager has been given the opportunity to make suggestions and edits to the procedure and of course has made what I consider unreasonable suggestions.
First I do not think it is acceptable to allow the person held in compliance of said document to make edits to it. Second, he has made suggestions like, eliminate the weekly CAB meetings and only meet in person if requested so then we would have rolling electronic approvals.
The point I am trying to get across to my manager is that the OPS manager may review for accuracy but it is my job to make sure that it meets NIST guidelines and secures our production environment and he should not be able to make edits to the procedure as he see’s fit.
Comments?
Thanks!

suggestions like, eliminate the weekly CAB meetings and only meet in person if requested so then we would have rolling electronic approvals.

Decisions at this level are basic policy and have to be sorted out before you write the procedure.

Quote:

person held in compliance

I rather think that the Ops manager is to a great extent one of your "customers" in this context.

If the change procedure does not work for operations, it is not going to work._________________"Method goes far to prevent trouble in business: for it makes the task easy, hinders confusion, saves abundance of time, and instructs those that have business depending, both what to do and what to hope."
William Penn 1644-1718

thanks for the feedback. We do have policy and procedures that state everything. It states that the CCB meetings are in person along with many other things. Our documents are periodically reviewed and this review cycle the Applications manager made many 'suggested' edits. One was to eliminate in person CCB meetings and do electronic voting. I am the change manager and do not want to change our current in person format. The senior manager will make the decision on what to do - App manager reports directly to him. My opinion is that I think that giving the app manager the ability to write/edit the document is like having the fox guard the hen house.
I do not see him as much a customer as a compliant entity. My customers are the agency and the business offices who request that we implement things safely within our live environment.

I wont argue that there is a lack of teamwork which to me translates to issues with leadership and direction. Eventhough that may be lacking, it does not mean that I should not try to do what I was hired to do - support a process that protects production. Removing more exposure from the process does not achieve my goal.